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(57) Abstract 

A smart card (100) is equipped with an internal time-of- 
day clock and calendar (106). Between the smart card (100) 
and a subscriber unit (209, 300), into which it is inserted, there 
is a communication of the subscriber's identity and a negotiated 
agreement for how long the subscriber unit (209, 300) is to maintain 
the transferred identity. For that duration of time, the subscriber unit 
(209, 300) is enabled with the subscriber's identity, and the smart 
card is essentially "dumb", and therefore unusable until that duration 
has elapsed. 
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method and apparatus for 
transferring information to a device 
in a communication system 

5 field of the Invention 

The present invention relates generally to subscriber units 
utilized in communication systems and, in particular, to transfer 
of information to subscriber units utilized in such communication 
1 0 systems. 

Background of the invention 

Communications systems, and more particularly cellular 

1 5 radiotelephone systems such as the Global System for Mobile 

Communications (GSM) Digital Cellular System, are known to 
include a variety of services that each cellular user can subscribe to 
for a fee. The information regarding the identity of each user 
(subscriber identity) and the services that he/she subscribes to are 

2 0 maintained in a centralized database, for example a Home 

Location Register (HLR) in GSM. Each cellular provider may have 
one or more of its own HLRs, however, the information specific to 
each cellular user is contained in only one HLR. As users travel 
between different geographical areas, key portions of this 

2 5 information are transfered upon request to a local database, for 

example a Visited Location Register (VLR) in GSM. Each 
subscriber unit also contains the subscriber identity that identifies a 
particular user. Each time a user attempts to place a cellular phone 
call, the subscriber identity and the services being requested are 

3 0 communicated between the subscriber unit and the local VLR via 

the radiotelephone network. It is the responsibility of the VLR to 
validate the subscriber's request against subscription services that 
were previously arranged. This may require the VLR to request a 
transfer of subscription services from the subscriber's HLR. If the 
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subscriber can be identified as a valid subscriber of the requested 
services, then the setup of the phone call is permitted to continue. 

As is also known, each subscriber unit has a unique 
equipment number associated with it. Early cellular 
5 radiotelephone systems required that the subscriber only be 
permitted to use one radio to place phone calls. Therefore, a 
verification was performed to ensure that the equipment number 
matched the subscriber identity. This coupling of the equipment 
number with the subscriber identity was intended to limit fraud by 
1 0 preventing the same subscriber identity from being replicated. 
More mature radiotelephone systems (such as the GSM system) 
now offer the user the flexibility of transferring the subscriber 
identity from one radiotelephone unit to another using 'smart 
card" technology. Additional security measures were 

1 5 implemented that require authentication of the subscriber identity, 

thus preventing the fraud of replication. Therefore, in mature 
radiotelephone systems such as GSM, the equipment number is 
not required to match the subscriber identity for fraud prevention 
purposes. 

2 0 Current smart cards are small and lightweight (i.e. similar to 

a credit card), and, as the name implies, contain a computer and 
memory enabling subscriber information to be transfered from the 
smart card to the subscriber unit. As long as the smart card is 
inserted in the subscriber unit, the subscriber is able to 

2 5 communicate the subscriber identity and requested service to the 

radiotelephone network for validation when the subscriber desires 
to place a phone call. Unfortunately, the requirement for the 
smart card to be inserted in the subscriber unit in order to 
complete a phone call provides significant opportunity for the 

3 0 smart card to be forgotten and left in the subscriber unit. If 

forgotten in the subscriber unit, the above precautions taken for 
fraud prevention become moot if the subscriber unit ends up in 
the hands of an undesired user. 
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To the average consumer, radiotelephone services (such as 
cellular) offer desired services that can be expensive if more than 
one subscriber identity is required. The current methods described 
above to prevent fraud can be considered too inflexible to permit 
5 cooperating consumers to share a subscriber identity. For example, 
two cooperating consumers having different requirements for the 
time of usage of a subscriber identity could maximize the use of 
the subscriber identity by sharing it using a prearranged schedule. 
The current fraud prevention techniques prohibit efficient use of 
1 0 the subscriber identity. 

Therefore, a need exists for a method and apparatus to 
temporarily transfer the subscriber identity from a subscriber unit, 
such as a Smart Card, to another subscriber unit, such as a 
radiotelephone unit, as well as a negotiated agreement for how 

1 5 long the receiving subscriber unit would keep the transfered 

subscriber identity. For that duration of time, the receiving 
subscriber unit would become enabled with the subscriber identity 
while the transmitting subscriber unit (e.g. Smart Card) would 
become unusable for that duration of time. Further, such a 

2 0 method and apparatus would permit activation times that were 

not immediate nor contiguous. 

BRIEF DESCRIPTION OF THE DRAWINGS 

2 5 FIG. 1 generally depicts a smart card having a time-of-day 

clock and calendar in accordance with the invention. 

FIG. 2 generally depicts a subscriber unit having a swipe slot 
to accept a smart card utilized to activate a subscriber unit in 
accordance with the invention. 

3 0 FIG. 3 generally depicts a subscriber unit having an insert 

slot to accept a smart card utilized to activate a subscriber unit in 
accordance with the invention. 
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FIG. 4 generally depicts, in flow diagram form, the steps 
taken by a subscriber to activate the subscriber unit of FIG. 2 in 
accordance with the invention. 

FIG. 5 generally depicts, in flow diagram form, the steps 
5 taken by a subscriber to activate the device of FIG. 3 in accordance 
with the invention. 

FIG. 6 depicts a beneficial implementation of a smart card 
having a time-of-day clock and calendar in accordance with the 
invention. 

10 

Detailed Description of a Preferred Embodiment 

A smart card 100 is equipped with an internal time-of-day 
clock and calendar 106. Between the smart card 100 and a device 

1 5 (subscriber unit 209, 300), into which it is inserted, there is a 

communication of the subscriber's identity and a negotiated 
agreement for how long the subscriber unit 209, 300 is to maintain 
the transferred identity. For that duration of time, the subscriber 
unit 209, 300 is enabled with the subscriber's identity, and the 

2 0 smart card is essentially "dumb," and therefore unusable until that 

duration has elapsed. This feature prevents the problem of 
simultaneous use and duplicated identities. 

In general terms, a method of transferring information to a 
device comprises the steps of providing the information to the 

2 5 device and allowing the device to utilize the information for a 

predetermined time period. The information can be related to, 
inter alia, the device's ability to access the communication system 
in which the device is utilizing, and to the device's identity. In the 
preferred embodiment, the information is provided by a smart 

3 0 card having an internal clock or timer, but in alternate 

embodiments the information may be provided by either a 
wireless link or a wired link. In the alternate embodiment 
scenario, the information may be further provided via keypad 
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entry, voice-activated entry, or any other convenient form of 
entry. 

In the preferred embodiment, the step of providing the 
information is performed by the smart card, which keeps track of 
5 the number of units (minutes) utilized, and when the use is 
scheduled. In one embodiment, the smart card could provide the 
device with time immediately; in an alternate embodiment, the 
smart card could provide the device with time reserved for use in 
the future. In still another embodiment, the subscriber utilizing 
1 0 smart card 100 could manually set when the device should become 
active. In the preferred embodiment, the device is a subscriber 
unit 209, 300 utilized in a cellular radiotelephone system. As one 
of ordinary skill in the art will appreciate, however, the concept of 
transferring information to a device as herein described and 

1 5 claimed is applicable to any scenario and devices where common 

information is desired to be shared. 

FIG. 1 generally depicts a smart card 100 having an internal 
clock or timer in accordance with the invention. As depicted in 
FIG. 1, a microprocessor 103 is coupled to both a time-of-day clock 

2 0 with a calendar 106 and is also coupled to a memory 109. In the 

preferred embodiment, microprocessor 103 is a MC6805 with built 
in memory 109. 

FIG. 2 generally depicts a smart card 100 utilized to activate a 
subscriber unit in accordance with the invention. As depicted in 

2 5 FIG. 2, a swipe card reader 200 having a swipe slot 203 is utilized to 

transfer information provided by smart card 100 into a subscriber 
unit 209. While many different techniques of information transfer 
exist, in the preferred embodiment the smart card 100 transfers a 
block of units, N, (or any remaining time, RT) to the subscriber 

3 0 unit 109 for each swipe through swipe slot 203. In other words, if 

the block of time N is equal to 15 minutes, subscriber unit 109 
would receive 15 minutes of usage for each time smart card 100 is 
swiped through swipe slot 203. In one embodiment, subscriber 
unit 209 (or swipe card reader 200) could display the current time 
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remaining for having the use of the subscriber unit's identity. 
Then, if the subscriber is in the middle of a call and recognizes that 
the allotted time has almost elapsed, the subscriber could swipe 
again to increase the time remaining. 
5 Also shown in FIG. 2 are function keys 206 residing on 

swipe card reader 200. An example of one of the keys would be a 
"DUMP" key which would manually flush the subscriber's 
identity from subscriber unit 209 (this action does not enable smart 
card 100). This would be utilized when the subscriber no longer 

1 0 needs the use of subscriber unit 209 and wishes to ensure that no 

one else may use unit 209. Of course, subscriber unit would 
become inactive after the allotted time has elapsed (the same time 
smart card 100 would reactivate). If a subscriber wished to credit 
the smart card 100 with any time remaining, one of keys 206 could 
15 be a "CREDIT" key which would be pressed, smart card 100 swiped 
through swipe insert 203, and any time remaining on subscriber 
unit 209 would be transferred back to smart card 100. This feature 
would in a sense "extract" back the identity from subscriber unit 
209 to the smart card 100, and allow smart card 100 to be reactivated 

2 0 immediately if so desired. 

FIG. 3 generally depicts a subscriber unit 300 having an 
insert slot 300 to accept smart card 100 having time-of-day clock 
with calendar in accordance with the invention. An example of 
an apparatus for accepting and retaining an smart card can be 

2 5 found in U.S. Patent No, 5,325,429, having as an inventor Jeffrey F. 

Kurgan, patented 28 June 1994, having as assignee the assignee of 
the present invention, and incorporated herein by reference. In 
this embodiment, when smart card 100 is inserted into subscriber 
unit 300 via slot 303, the subscriber unit itself might ask for the 

3 0 length of time the device is to hold the subscriber unit s identity. 

When prompted as such, a subscriber could then insert the 
number of minutes through the keypad (not shown) on the front 
of subscriber unit 300. The protocol between the subscriber unit 
and the smart card 100 would then negotiate the proper transfer of 



WO 96/11545 



PCT7US95/10768 



time. For the duration that the subscriber has requested, the 
subscriber unit 300 would be enabled with the subscriber unit's 
identity, while the smart card 100 would essentially "go dumb" 
until that duration has elapsed. 
5 Important to note is that any negotiated activation time 

need not be immediate, nor necessarily contiguous. For example, 
a subscriber may program a subscriber unit to go active for a certain 
period (or periods) in the future. At the programmed starting 
times, the subscriber unit 300 would be enabled, and the smart card 
1 0 100 would inactivate for the programmed duration of time. While 
the embodiments described in FIG. 2 and FIG. 3 have the 
programming via the subscriber unit 209 and 300, these 
embodiments are purely for convenience as each subscriber unit 
209, 300 have keypad entry means built therein. As one of 

1 5 ordinary skill in the art will appreciate, the complexity of the 

subscriber units 209, 300 can be lessened if the smart card itself is 
capable of being programmed via a keypad on the smart card 100 
itself, so that no programming via the subscriber units 209, 300 
need take place. 

2 0 FIG. 4 generally depicts, in flow diagram form, the steps a 

subscriber would undergo to activate a subscriber unit 209 in the 
swipe configuration shown in FIG- 2. The process starts at block 
403 where a check is made to determine if the device is active. If 
no, a check 406 is made to determine if a swipe has been registered. 

2 5 If a swipe has been registered, a check 409 is made to determine if 

the swipe is for a debit or a credit 409. A request for a debit or a 
credit would be made by the subscriber via a "DEBIT" or "CREDIT" 
key via keys 206. Continuing, if the request is for a debit (i.e., the 
subscriber wishes to extract the user identity from smart card 100 

3 0 into subscriber unit 209), a check 412 is made to determine the time 

available on smart card 100- If time is available, the device is 
activated 415, at time Tx (the current time) with N units of time 
(where N may be predetermined or input by the subscriber) or 
with any remaining time (RT) remaining on smart card 100. After 
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the device has been activated, the smart card 100 is debited 418 by 
the N units of time or the remaining time (RT). The process then 
goes back to block 403 where a check to determine if the device is 
active is made. 

5 If at block 403 the device is determined to be active, a check 

is made at block 421 to determine if the current time (CT) is less 
than Tx + N or less than Tx + RT. In other words, a check is made 
to determine if the N units or the RT remaining time has expired. 
If the current time is greater than the N units or RT remaining 
1 0 time, the allotted time has expired and process proceeds to block 
422 which deactivates the device. At this point, block 403 is 
repeated. If, however, the allotted time has not expired at block 
421, a check 424 is made to determine if the subscriber wishes to 
deactivate the device. If yes, the process proceeds to block 422 

1 5 where the device is deactivated. If the subscriber does not wish to 

deactivate the device, a check 406 is made to determine if another 
swipe has been registered and flow proceeds as described above. 
Finally, if the request 409 is for a credit, process proceeds to block 
410 where the smart card is credited with any remaining time. 

2 0 Process then proceeds to deactivate device at 412 and again the 

entire process is initiated at block 403 to determine whether the 
device is active. 

FIG. 5 generally depicts, in flow diagram form, the steps 
taken by a subscriber to activate the device of FIG. 3 in accordance 

2 5 with the invention. The process starts at block 503 where a check 

is made to determine if the device is active. If no, a check is made 
506 to determine if the smart card is inserted in the device. In the 
preferred embodiment, the device is a subscriber unit as depicted 
in FIG. 3, but may be any communication unit suitable for use 

3 0 with smart card 100. Continuing, if the smart card is inserted in 

the device, a check is made 509 to determine if the subscriber 
requests a debit or credit. If the request if for a debit (i.e., the 
subscriber wishes to extract the user identity from smart card 100 
and input that identity into subscriber unit 300), the future time 
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(Tf) is set in a request for M units of time is made at block 512. A 
check is then made 515 to determine if time is available on smart 
card 100, If no time is available, the process proceeds to block 503. 
If time is available on smart card 100, smart card 100 is debited by 
5 the M units of time or RT remaining units of time at block 518. 
Process then proceeds to block 521 where a check is made to 
determine if the current time (CT) is equal to the future time (Tf) 
that was set at block 512. Future time (Tf) may represent the 
current time (CT) or may represent a time that is programmed for 
1 0 future use. Consequently, if the current time does not equal the 
future time (Tf), process proceeds to block 503. On the contrary, if 
the current time is equal to the future time (Tf), (i.e., future time 
being the programmed time), the device is activated 524 with M 
units of time or RT remaining units of time, whichever was 

1 5 debited at block 518. 

At this point, the device is active and as such, needs to be 
monitored for expiration of the elapsable time. Consequently, 
after the device is activated at block 524, and if the device is active 
at block 503, a check is made to determine if the current time is less 

2 0 than Tf + M or if the current time is less than Tf + RT. If yes, the 

device is still active and process proceeds to block 530 where a 
check is made to determine if the subscriber wishes to deactivate 
the device. If no, process proceeds to block 506 where a check is 
made to determine if the smart card 100 is inserted in the device. 

2 5 At this point, if the smart card 100 is not inserted in the device 300, 

process proceeds to block 539 where check is made to determine if 
there is an external stimulus to erase the future time. The external 
stimulus may be affected through a subscriber input via the keypad 
of device 300, but may likewise be a stimulus from a base-station 

3 0 (not shown) of the cellular radiotelephone system. Continuing, if 

no external stimulus is present, process proceeds to block 521 as 
described above. If there is an external stimulus to erase the future 
time, process proceeds to block 533 where the device is entirely 
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deactivated. Deactivation of the device erases the future time that 
had been previously stored in device 300. 

Returning to block 527, if the current time is greater than Tf 
+ M or is greater than Tf + RT, the elapsable time has elapsed and 
5 the device must now be deactivated. Consequently, process then 
proceeds to block 533 where the device is deactivated. If, at block 
509, the request is for a credit of time, process from block 509 
proceeds to block 536 where the smart card 100 is credited with any 
remaining time RT unused by the subscriber for this programming 
1 0 period. At this point, process proceeds to block 533 where the 
device is deactivated. Output from block 533 proceeds to block 503 
where, a check is made to determine if the device is active and the 
entire process is repeated. 

FIG. 6 depicts a beneficial implementation of smart card 100 

1 5 with time-of-day clock and calendar 106 in accordance with the 

invention. As shown in FIG. 6, information related to a subscriber 
unit's identity is supplied to a plurality of subscriber units 600, 603. 
Smart card 100 provides the identity information to a first 
subscriber unit 600. The information may be provided to 

2 0 subscriber unit 600 for a first time period, which may be any time 

period desirable by the subscriber. Smart card 100 is then inserted 
into a second subscriber unit 603 so that the identity information 
may be supplied to subscriber unit 603 for a time period not 
common with the first time period. In other words, once 

2 5 subscriber unit 600 has been programmed for the first time period, 

subscriber unit 603 may be programmed for any other time period 
so long as that programmed time period does not overlap with the 
first time period programmed into first subscriber unit 600. 

While two subscriber units have been depicted in FIG. 6, 

3 0 more than two may obviously be programmed at any one time. 

The only requirement in programming more than two subscriber 
units is that no time overlap during programming may exist. 
Smart card 100 ensures that programming overlap does not occur 
by keeping track of all programmed time, and not allowing any 
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time overlap to occur. In other words, if a second subscriber unit 
attempted to program for time which overlapped with time 
programmed in a first subscriber unit, smart card 100 could be set- 
up so that either, inter alia, no programming is allowed or 
5 programming for non-overlapping time is only allowed. With the 
cooperation of the cellular system operators, it might be desirable 
and possible to introduce a capability whereby a restricted 
subscriber unit could place an emergency call. 

There may be the need to provide some guard or buffer time 
10 in the transfer of ownership of the user identity. This would 
avoid any problem with clock drifting or allowing any cellular 
system fraud detection mechanism from tripping, for example, by 
its noticing that a user skips across town in a matter of seconds. 
Limitations would also have to be in place to prevent a user from 

1 5 tampering with the time-of-day clock and calendar. 

After an identity transfer occurs, it might be useful for the 
newly enabled radio to register on the system. This would ensure 
that the system becomes aware of the new location of the active 
user. An audible beep might warn a user that he about to lose the 

2 0 ownership of the radio's identity and therefore, that his radio is 

about to become inoperative. 

Direct electrical connection is not necessary during the 
programming of the multiple units. For example, it might be 
desirable to be able to program the two subscriber units using a 

2 5 phone modem connection. In fact, it is even possible for one of 

the subscriber units (obviously the one that "owns" the subscriber 
identity) to be operating over the cellular system during the 
programming process. All that is necessary is to incorporate 
adequate security measures such that properly negotiated 

3 0 assignment of operating periods is accomplished. These 

techniques are fairly well known in the public key literature, 
including authentication mechanisms, random challenges, and 
signature verification. For example, a verification algorithm 
might be utilized to validate acceptance of the assigned times by all 
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the other unit(s) during the time the programming is being 
negotiated/ accomplished. The programming procedure might 
also include some status setting or checking between the plurality 
of units, for example, to ensure synchronization of the on-board 
5 calendars and clocks. Enough security is possible to guarantee that 
the simultaneity criterion is unable to be obviated. To prevent 
fraud, a unique group key might be useful to embed in the 
subscriber units of a group so that the subscriber unit's electronic 
serial number (ESN) and phone number are only exchanged 

1 0 between members of the same group. 

It may be desirable for the subscriber units 600, 603 to obtain 
time-of-day information from the infrastructure. This could be 
received on the control channel when the subscriber unit powers 
up, and the subscriber unit could keep time thereafter. 
15 As one of ordinary skill in the art will appreciate, many 

variations of the present invention are available. For example, a 
plurality of devices may share information amongst themselves by 
negotiating information for use during a predetermined time 
period from a source device and negotiating, from the source 

2 0 device, the same information for use during a time period non- 

overlapping with the predetermined period of time. The source 
device in this embodiment may comprise a smart card 
with/ without a time-of-day clock and calendar, or any other 
convenient method of transfer. 
2 5 What we claim is: 



WO 96/11545 



PCT/US95/10768 



13 



Claims 



1. A method of transferring information to a device utilized in 
5 a communication system, the method comprising the steps of: 

providing the information to the device; and 
allowing the device to utilize the information for a 
predetermined time period. 

10 

2. The method of claim 1 wherein the information further 
comprises information related to the devices ability to access the 
communication system. 

15 3. A method of transferring subscriber unit identity to a 
subscriber unit, the method comprising the steps of: 

providing the subscriber unit identity to the subscriber unit; 

and 

2 0 allowing the subscriber unit to utilize the subscriber unit 

identity for a predetermined time period. 

4. An apparatus for transferring subscriber unit identity to a 
subscriber unit, the apparatus comprising: 

25 

means for providing the subscriber unit identity to the 
subscriber unit; and 

means, within the subscriber unit, for allowing the 
subscriber unit to utilize the subscriber unit identity for a 

3 0 predetermined time period. 

5. The apparatus of claim 4 wherein the means for providing 
further comprises one of either a smart card, a wireless link or a 
wired link. 
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6. A method of supplying a plurality of devices with 
information, the method comprising the steps of: 

5 providing the information; 

supplying a first device with the information for a first time 
period; and 

supplying a second device with the information for a second 
time period not common with the first time period. 

10 

7. A method of supplying a plurality of devices with identity, 
the method comprising the steps of: 

providing the identity to the device; 

1 5 supplying a first device with the identity for a first time 

period; and 

supplying a second device with the identity for a second 
time period not common with the first time period. 

2 0 8. An apparatus for supplying a plurality of subscriber units 

with subscriber unit identity, the apparatus comprising: 

means for providing the subscriber unit identity to the 
subscriber unit; 

2 5 means, within a first subscriber unit, for supplying the first 

subscriber unit with the subscriber unit identity for a first time 
period; and 

means, within a second subscriber unit, for supplying the 
second subscriber unit with the subscriber unit identity for a 

3 0 second time period not common with the first time period. 

9. The apparatus of claim 8 wherein the means for supplying 
the subscriber unit identity further comprises a smart card having 
a time-of-day clock and calendar. 
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10, A method of sharing information amongst a plurality of 
devices, the method comprising the steps of: 

5 negotiating information for use during a predetermined 

time period from a source device; and 

negotiating, from the source device, the same information 
for use during a time period non-overlapping with the 
predetermined period of time. 
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